Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
File:                     60cb61fc-8048-3d70-a4c8-ddf43df58222.roa (raw, json)
Hash identifier:          RlVrE69/PZCAMLrKSSrRDXhanSB5mTBQNe/NFHuJUS0=
Subject key identifier:   41:4D:55:86:E0:BE:C4:0B:13:E9:2C:BA:2E:15:0F:A6:B4:72:15:4A
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285849F9DFD23C6106C4FC04530C00
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     3423
IP address blocks:        2602:fbdc:88::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d2:3c:61:06:c4:fc:04:53:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=30c95e30-59bb-4ac1-a18b-98523e34b04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ba:69:84:ba:06:cb:64:9d:ce:8a:1d:0b:44:
                    f5:e5:a5:42:58:ca:5e:64:41:2d:44:07:fd:49:bf:
                    4d:17:93:0c:36:6a:49:5e:ae:9d:82:a0:00:3a:37:
                    11:5b:90:f3:a9:23:92:74:2d:e1:a2:c7:5c:09:6e:
                    3e:2a:10:b4:66:0f:aa:ac:b7:54:b3:7f:fd:69:92:
                    f2:9d:cd:4d:c6:17:cc:ef:32:6d:d7:eb:bd:93:85:
                    12:9b:28:0c:0f:55:64:44:41:95:7d:d3:2a:68:3c:
                    aa:61:e4:ff:67:86:3d:2c:ae:0c:b6:63:68:59:34:
                    23:a0:5d:0c:98:3f:c3:dc:38:1b:57:9f:9b:0e:00:
                    e7:aa:af:71:0f:df:ac:82:8e:72:e8:29:75:bc:e2:
                    8b:05:01:bc:27:f8:c4:d0:f4:3d:46:33:33:79:85:
                    ac:f7:21:37:d2:2b:de:bd:f1:0c:de:12:83:71:5b:
                    05:a5:09:76:fd:7a:4a:c1:d9:99:43:5d:5c:07:59:
                    19:56:c3:72:e9:3c:68:af:14:e2:d2:c7:de:3e:04:
                    ea:05:e2:c1:e8:45:ee:af:dc:53:54:68:b8:55:a0:
                    87:b1:de:e5:cd:5e:85:80:cd:f5:21:be:91:8a:79:
                    0d:3b:f7:ba:93:cf:f6:75:ac:9b:61:76:a1:97:a1:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4D:55:86:E0:BE:C4:0B:13:E9:2C:BA:2E:15:0F:A6:B4:72:15:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:55:44:84:c3:4f:60:70:3b:87:8d:cb:c5:b6:8d:3f:c7:ec:
         c8:7c:83:16:9e:4e:bd:65:f6:60:86:f6:f3:be:c5:c0:dc:a3:
         8b:32:21:a5:1f:89:2d:49:96:c0:0d:b4:a1:c0:9c:57:ff:70:
         46:80:40:70:8a:32:60:ce:4f:68:c7:23:08:c5:9e:32:35:e1:
         90:88:7d:59:10:e4:6c:e8:72:b3:9b:6a:3e:d6:24:ea:f0:4d:
         5a:f3:c6:6b:fe:4d:14:5a:40:b7:7f:12:d4:cd:34:ce:3f:91:
         1f:47:68:57:61:bf:ae:d1:05:91:ad:80:f0:3f:e2:db:0b:ef:
         00:6a:d2:a1:fb:db:c1:75:25:02:5d:6a:0d:55:b1:2e:48:17:
         14:86:1c:93:a2:3b:f2:86:6d:54:cc:bc:42:05:b4:2b:4c:d7:
         9e:c0:f9:d3:9f:2a:d9:86:c7:32:1b:89:aa:be:9f:6c:4a:ba:
         14:e0:cc:70:30:b5:b8:c6:26:5c:e3:2c:58:4f:5a:0f:1a:61:
         b2:0e:bd:ed:d0:13:ee:44:ad:7c:81:45:f9:7b:e6:0c:f1:25:
         b8:55:b3:95:39:df:a6:3f:37:07:61:11:bd:da:62:eb:82:2d:
         55:e8:a9:3e:48:71:18:38:c5:21:c9:88:96:31:e0:53:cb:66:
         88:f5:27:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn539I8YQbE/ARTDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
MzBjOTVlMzAtNTliYi00YWMxLWExOGItOTg1MjNlMzRiMDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7pphLoGy2SdzoodC0T15aVCWMpeZEEtRAf9
Sb9NF5MMNmpJXq6dgqAAOjcRW5DzqSOSdC3hosdcCW4+KhC0Zg+qrLdUs3/9aZLy
nc1NxhfM7zJt1+u9k4USmygMD1VkREGVfdMqaDyqYeT/Z4Y9LK4MtmNoWTQjoF0M
mD/D3DgbV5+bDgDnqq9xD9+sgo5y6Cl1vOKLBQG8J/jE0PQ9RjMzeYWs9yE30ive
vfEM3hKDcVsFpQl2/XpKwdmZQ11cB1kZVsNy6TxorxTi0sfePgTqBeLB6EXur9xT
VGi4VaCHsd7lzV6FgM31Ib6RinkNO/e6k8/2daybYXahl6F53QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEFNVYbgvsQLE+ksui4VD6a0chVKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNjBjYjYxZmMtODA0OC0z
ZDcwLWE0YzgtZGRmNDNkZjU4MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACtVRITDT2BwO4eNy8W2jT/H7Mh8gxaeTr1l9mCG9vO+xcDco4sy
IaUfiS1JlsANtKHAnFf/cEaAQHCKMmDOT2jHIwjFnjI14ZCIfVkQ5GzocrObaj7W
JOrwTVrzxmv+TRRaQLd/EtTNNM4/kR9HaFdhv67RBZGtgPA/4tsL7wBq0qH728F1
JQJdag1VsS5IFxSGHJOiO/KGbVTMvEIFtCtM157A+dOfKtmGxzIbiaq+n2xKuhTg
zHAwtbjGJlzjLFhPWg8aYbIOve3QE+5ErXyBRfl75gzxJbhVs5U536Y/NwdhEb3a
YuuCLVXoqT5IcRg4xSHJiJYx4FPLZoj1J5U=
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:18:53 2025 by rpki-client